security_rust/
scanner.rs

1// Copyright (c) 2026 erik <erik@erik.xyz> — https://erik.xyz
2
3use crate::data::{
4    CsvInjectionDetector, DeserializationDetector, JwtAttackDetector, MailHeaderDetector,
5    PrototypePollutionDetector,
6};
7use crate::file::{DataLeakDetector, PathTraversalDetector, UploadDetector};
8use crate::injection::{
9    CommandInjectionDetector, GraphQlInjectionDetector, JndiInjectionDetector,
10    LdapInjectionDetector, NoSqlInjectionDetector, SqlInjectionDetector, SsiInjectionDetector,
11    SstiDetector, XPathInjectionDetector, XssDetector,
12};
13use crate::protocol::{
14    CorsDetector, DnsRebindingDetector, HeaderInjectionDetector, HostHeaderDetector,
15    OpenRedirectDetector, RequestSmugglingDetector, SsrfDetector, WebSocketDetector, XxeDetector,
16};
17use crate::{Detector, result::DetectionResult};
18
19pub struct Scanner {
20    detectors: Vec<Box<dyn Detector>>,
21}
22
23impl Default for Scanner {
24    fn default() -> Self {
25        Self {
26            detectors: vec![
27                // Injection
28                Box::new(XssDetector),
29                Box::new(SqlInjectionDetector),
30                Box::new(CommandInjectionDetector),
31                Box::new(NoSqlInjectionDetector),
32                Box::new(LdapInjectionDetector),
33                Box::new(XPathInjectionDetector),
34                Box::new(JndiInjectionDetector),
35                Box::new(SsiInjectionDetector),
36                Box::new(GraphQlInjectionDetector),
37                Box::new(SstiDetector),
38                // Protocol
39                Box::new(SsrfDetector),
40                Box::new(XxeDetector),
41                Box::new(HeaderInjectionDetector),
42                Box::new(HostHeaderDetector),
43                Box::new(RequestSmugglingDetector),
44                Box::new(OpenRedirectDetector),
45                Box::new(CorsDetector),
46                Box::new(WebSocketDetector),
47                Box::new(DnsRebindingDetector),
48                // Data
49                Box::new(DeserializationDetector),
50                Box::new(CsvInjectionDetector),
51                Box::new(MailHeaderDetector),
52                Box::new(JwtAttackDetector),
53                Box::new(PrototypePollutionDetector),
54                // File
55                Box::new(PathTraversalDetector),
56                Box::new(UploadDetector),
57                Box::new(DataLeakDetector),
58            ],
59        }
60    }
61}
62
63impl Scanner {
64    pub fn new() -> Self {
65        Self::default()
66    }
67
68    pub fn builder() -> ScannerBuilder {
69        ScannerBuilder::default()
70    }
71
72    pub fn scan(&self, input: &str) -> Vec<DetectionResult> {
73        let mut results = Vec::new();
74        for detector in &self.detectors {
75            if let Some(result) = detector.detect(input) {
76                results.push(result);
77            }
78        }
79        results
80    }
81
82    pub fn scan_with(&self, input: &str, names: &[&str]) -> Vec<DetectionResult> {
83        let mut results = Vec::new();
84        for detector in &self.detectors {
85            if names.contains(&detector.name())
86                && let Some(result) = detector.detect(input)
87            {
88                results.push(result);
89            }
90        }
91        results
92    }
93}
94
95#[derive(Default)]
96pub struct ScannerBuilder {
97    detectors: Vec<Box<dyn Detector>>,
98}
99
100impl ScannerBuilder {
101    pub fn with_detector(mut self, detector: Box<dyn Detector>) -> Self {
102        self.detectors.push(detector);
103        self
104    }
105
106    pub fn build(self) -> Scanner {
107        Scanner {
108            detectors: self.detectors,
109        }
110    }
111}
security_rust/scanner.rs

security_rust/
scanner.rs
